fix _download() private to work in http embed mode